Higher Education

Reply
This is an open group. Sign in and click the "Join Group" button to become a group member and start posting.
Highlighted
Frequent Contributor I
Posts: 126
Registered: ‎07-06-2010
802.1x - why so many duplicate authentications from iPhones?

I was looking at our NPS logs and aruba authentication logs (and dhcpd while I was at it...) and was shocked to see so many duplicate entries for all our iPhone users. Our dhcpd server often sees multiple requests, our NPS log is just full of them... We do not see any connectivity issues, or have any reported problems from the users, the devices all seem to be authenticating correctly. The major correlation I see is that almost all the devices that are showing this behavior are iphones.

Could this be because the nature of the device to be in a purse or pocket, and often hops on and off the network?

Just curious if anyone else is seeing this behaviour.

Frequent Contributor II
Posts: 120
Registered: ‎10-31-2012
Re: 802.1x - why so many duplicate authentications from iPhones?

Iphones and Ipads are always on as users move around a campus they continually authenticate, laptops useally only auth when opened and turned on.  In addition Ipads/Iphones do not support  Opportunistic key caching,  so they continually do a full re-auth 802.11r is suppose to resolve this if turned on... but also may cause some issues of its own.

 

Frequent Contributor I
Posts: 126
Registered: ‎07-06-2010
Re: 802.1x - why so many duplicate authentications from iPhones?

that sucks... :) 

 

It is so annoying - I can see 50-60 of these from one user over the course of 5 minutes if they are walking around campus.  Is there anyway to slow this down.  I like to have my radius logs, but man they are getting a bit crazy with all the iphone auths!

Occasional Contributor I
Posts: 10
Registered: ‎03-13-2012
Re: 802.1x - why so many duplicate authentications from iPhones?
Yes! We are a Cisco shop but are seeing the same behavior with duplicate dhcp scopes. This is happening on iphones and chromebooks.

Pola Swartz
Wireless Team Lead
Sr. Wireless Administrator
Department of Technology Services
Denver Public Schools
720-423-3603
I Proudly Play For Team DPS
[Description: DPS Logo]
Frequent Contributor I
Posts: 126
Registered: ‎07-06-2010
Re: 802.1x - why so many duplicate authentications from iPhones?

So is there anyway to help this issue?  It seems the iPhones in particular do some agressive roaming of APs that seem to make this even more apparent... 

 

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010
Re: 802.1x - why so many duplicate authentications from iPhones?
Since you are not experiencing any performance, roaming or connectivity
issues, I wouldn't change anything.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I
Posts: 126
Registered: ‎07-06-2010
Re: 802.1x - why so many duplicate authentications from iPhones?
[ Edited ]

cappalli wrote:
Since you are not experiencing any performance, roaming or connectivity
issues, I wouldn't change anything.

Well I would not say I am not experiencing any issues - my radius accounting/logging would beg to differ :)  My SQL radius logs are seeing around 2.5million entries a month... its kind of crazy...

 

I take that back - just checked my SQL log and just for today we have 234k log entries.  So that would be almost 5million log entires a month!

Guru Elite
Posts: 21,269
Registered: ‎03-29-2007
Re: 802.1x - why so many duplicate authentications from iPhones?

You might want to contact Apple about that behavior...



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010
Re: 802.1x - why so many duplicate authentications from iPhones?
We see over 2 million auths per week. Those numbers don't sound out of the
ordinary.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor I
Posts: 126
Registered: ‎07-06-2010
Re: 802.1x - why so many duplicate authentications from iPhones?

How many users?  We have 600 users...

Search Airheads
Showing results for 
Search instead for 
Did you mean: